Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa
File:                     2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa (raw, json)
Hash identifier:          LMd139l3twJZl6JJW6cjYggTIR0glJLMojCrxDb8SxM=
Subject key identifier:   99:42:E4:7C:40:AC:47:9F:5A:B1:81:C1:24:DE:B3:19:E7:F5:0A:6C
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3757
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa
Signing time:             Sun 04 Oct 2026 15:18:15 +0000
ROA not before:           Sun 04 Oct 2026 15:18:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23033
IP address blocks:        2403:cc00:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14167 (0x3757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Oct  4 15:18:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac26e37-567b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:2a:69:c6:44:82:f6:ab:ff:8e:32:51:65:
                    76:b8:1c:fe:62:18:be:94:ac:9a:e2:25:bb:33:ec:
                    a6:0e:cb:8a:50:7d:30:ce:b7:2f:bb:79:55:0d:01:
                    f7:4b:84:56:3e:76:d4:56:74:0a:94:2d:a8:23:e3:
                    25:18:65:4d:3c:ef:57:4e:d2:e1:22:91:54:75:64:
                    bc:e6:d1:60:03:50:f2:ab:5f:97:70:94:af:4c:fc:
                    df:ff:7e:b9:bf:22:10:0e:7d:ba:88:64:e7:7a:0b:
                    b6:f8:fe:c1:c2:a2:71:b4:a9:68:e6:b2:fa:42:ce:
                    5b:27:41:77:16:a3:9f:18:c7:d7:8b:bf:58:50:63:
                    ca:6e:f8:32:b6:3e:f2:f6:9e:85:ff:ad:79:a4:c3:
                    8b:61:2f:c0:68:1b:ac:98:72:69:82:7f:fa:cf:6f:
                    ac:53:2f:46:73:cb:1e:a6:bc:9a:43:69:8c:2d:f0:
                    de:25:a7:21:4f:7b:d9:6b:67:ba:07:8a:54:de:bb:
                    88:55:a1:fd:10:d2:91:65:c0:cc:d6:f2:a5:eb:8b:
                    17:61:4a:c6:15:53:a5:ce:94:e0:a2:c6:e7:0f:da:
                    f8:7e:60:0a:30:0e:fd:f3:1d:8a:ae:b0:df:e4:8a:
                    6e:74:e0:ad:72:84:a4:e4:9a:3b:c6:79:ee:5c:dd:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:42:E4:7C:40:AC:47:9F:5A:B1:81:C1:24:DE:B3:19:E7:F5:0A:6C
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/2FD7D72EBB7E11E9AFB49C42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:cc00:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:4d:07:35:d4:c3:a8:e5:cc:9b:7d:54:9f:85:12:c6:a0:
         b9:a0:d3:aa:dc:8e:70:4c:29:b6:ab:a9:4d:0e:35:f0:63:b1:
         e2:11:11:18:00:42:33:f9:49:4b:61:da:b5:92:f6:3a:0d:0a:
         bd:2d:a5:7b:10:c3:80:9e:8c:de:89:12:0a:c9:41:24:a1:ad:
         10:9e:cd:85:03:0e:37:09:8e:82:c9:dd:15:d2:f1:54:f7:48:
         6b:38:8b:9c:d0:20:39:89:4e:de:f7:b6:44:ca:39:98:18:d2:
         a1:b4:ed:fb:03:1f:60:03:2d:58:d0:64:6d:8b:96:b1:fc:91:
         3f:5a:c0:e7:a1:3e:46:83:da:2e:69:90:16:66:d1:4c:76:d0:
         3b:33:0f:9d:0f:ea:03:e0:85:3e:f7:1d:04:4b:b8:16:6f:72:
         41:75:e6:de:3d:e0:38:6b:e9:eb:d7:d3:07:21:e4:aa:4a:29:
         18:21:89:15:81:50:c6:f3:19:f2:1f:80:40:e3:1d:df:09:41:
         32:3f:bd:9f:1e:12:46:5b:64:9e:bf:8d:6d:dd:d0:c3:09:7d:
         7d:7e:bf:c0:8c:dc:1f:5f:82:27:ee:45:91:2f:8f:cc:15:e7:
         7a:33:a5:1d:b6:16:03:8b:fd:4a:04:d0:50:ee:38:74:39:03:
         7c:d1:73:19
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICN1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0
OTExRjFGNEYwHhcNMjYxMDA0MTUxODE1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyNmUzNy01NjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3mAqacZEgvar/44yUWV2uBz+Yhi+lKya4iW7M+ymDsuKUH0wzrcvu3lVDQH3
S4RWPnbUVnQKlC2oI+MlGGVNPO9XTtLhIpFUdWS85tFgA1Dyq1+XcJSvTPzf/365
vyIQDn26iGTnegu2+P7BwqJxtKlo5rL6Qs5bJ0F3FqOfGMfXi79YUGPKbvgytj7y
9p6F/615pMOLYS/AaBusmHJpgn/6z2+sUy9Gc8sepryaQ2mMLfDeJachT3vZa2e6
B4pU3ruIVaH9ENKRZcDM1vKl64sXYUrGFVOlzpTgosbnD9r4fmAKMA798x2KrrDf
5IpudOCtcoSk5Jo7xnnuXN1EJwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJlC5HxA
rEefWrGBwSTesxnn9QpsMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE
OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvMkZEN0Q3MkVC
QjdFMTFFOUFGQjQ5QzQyQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAPMABAwDQYJKoZIhvcNAQELBQADggEBAGkrTQc11MOo5cybfVSf
hRLGoLmg06rcjnBMKbarqU0ONfBjseIRERgAQjP5SUth2rWS9joNCr0tpXsQw4Ce
jN6JEgrJQSShrRCezYUDDjcJjoLJ3RXS8VT3SGs4i5zQIDmJTt73tkTKOZgY0qG0
7fsDH2ADLVjQZG2LlrH8kT9awOehPkaD2i5pkBZm0Ux20DszD50P6gPghT73HQRL
uBZvckF15t494Dhr6evX0wch5KpKKRghiRWBUMbzGfIfgEDjHd8JQTI/vZ8eEkZb
ZJ6/jW3d0MMJfX1+v8CM3B9fgifuRZEvj8wV53ozpR22FgOL/UoE0FDuOHQ5A3zR
cxk=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:31:30 2026 by rpki-client